Incidentally, I thought I should add - we did run a couple of the exploits that were out in the wild on unpatched versions of the servers in our test environments, and none of them work. It turns out our sandboxing system would have made this particular escalation system unlikely to ever work, but you can't be too careful!